--- a/pyramid_cubicweb/__init__.py	Sat Jan 03 00:14:06 2015 +0100
+++ b/pyramid_cubicweb/__init__.py	Tue Dec 23 10:22:49 2014 +0100
@@ -39,7 +39,7 @@
     # pyramid_cubicweb anymore
     app = wsgicors.CORS(
         app,
-        origin=cwconfig['access-control-allow-origin'],
+        origin=' '.join(cwconfig['access-control-allow-origin']),
         headers=cwconfig['access-control-allow-headers'],
         methods=cwconfig['access-control-allow-methods'],
         credentials='true')